跟进:司法部打击朝鲜加密盗窃,冻结逾27亿美元币安被盗资产,另破深度伪造视频会议骗局

美国司法部2026年11月12日宣布多项协同行动,打击朝鲜政府以大规模盗窃加密货币为其政权筹资的做法。行动包括查封「FaceStealer」社交工程骗局所用的云端基础设施,该骗局已盗走价值逾4亿美元的加密货币;执法部门同时已冻结币安(Binance)被盗资产逾27亿美元,并取得法院授权,扣押或限制其中逾12亿美元。
本站此前报道,币安10月底遭盗逾63亿美元虚拟资产。司法部此次披露,10月29日前后,联邦调查局 FBI 称为「TraderTraitor」的朝鲜军方人员从币安盗走逾60亿美元虚拟资产。此后,司法部国家安全司、刑事司、哥伦比亚特区联邦检察官办公室与执法伙伴同虚拟资产服务商合作追截被盗资产,目前已冻结逾27亿美元,追踪、冻结、扣押与没收工作仍在进行。
另一条线是加州中区联邦检察官办公室宣布捣毁的 FaceStealer 骗局。朝鲜黑客以被盗账号向目标发出视频会议邀请,在会议中播放此前受害者的录像冒充熟人参会,还用超级智能(SI)制作加密货币与 Web3 行业知名人物的深度伪造视频骗取信任。
会议中,黑客再制造「听不到声音」一类假故障,给出修复链接或提示,受害者照做便被植入恶意软件,电脑被控制,加密货币被盗,通讯账号与联系人名单也被用来寻找下一批目标。过去18个月,这套手法已盗走逾4亿美元,近来还瞄准开源软件开发者与维护者,图谋供应链攻击。FBI 凭联邦搜查令扣押了900多段 FaceStealer 受害者的摄像头视频,并发布专题报告与信息页说明防范办法。
司法部国家安全事务首席副助理司法部长 M. Scott Proctor 表示,朝鲜政府以加密盗窃为其政权与非法武器计划筹资,美国将动用一切工具扣押并返还其不义之财。刑事司助理司法部长 A. Tysen Duva 表示,刑事司在案发后迅速冻结了这起历史性入侵的约半数被盗数字资产。FBI 网络部门官员 Brett Leatherman 表示,朝鲜网络人员过去18个月以 FaceStealer 积极针对加密货币与 Web3 从业者行骗。(来源:美国司法部)
Follow-Up: Justice Department Disrupts North Korea Crypto Theft, Freezing Over $2.7B in Stolen Binance Assets and Breaking Up a Deepfake Video-Meeting Scheme
The U.S. Department of Justice on November 12, 2026, announced coordinated actions against the North Korean government's schemes to fund its regime through the massive theft of cryptocurrency. The actions include the seizure of cloud-based infrastructure used in the FaceStealer social engineering scheme, which has resulted in the theft of more than $400 million worth of cryptocurrency, and the freezing of more than $2.7 billion in assets stolen from Binance, with court authorization to seize or restrain more than $1.2 billion of that amount.
GSM previously reported that Binance lost more than $6.3 billion in virtual assets in late October. The Justice Department now says that on or about October 29, members of the North Korean military referred to by the FBI as TraderTraitor stole more than $6 billion in virtual assets from Binance. Since then, the National Security Division, the Criminal Division, the U.S. Attorney's Office for the District of Columbia and law enforcement partners have worked with virtual asset service providers to interdict the stolen assets, freezing more than $2.7 billion so far, with efforts to trace, freeze, seize and forfeit the assets ongoing.
Separately, the U.S. Attorney's Office for the Central District of California announced the disruption of the FaceStealer scheme. North Korean hackers lured targets with video meeting invitations sent from accounts stolen from prior victims, played recorded video of previous victims to simulate trusted contacts, and used super intelligence (SI) deepfake videos of well-known figures in the cryptocurrency and Web3 industries to gain trust.
During the meetings, the hackers introduced a fake technical error, such as claiming the target could not be heard, and offered a fix link or prompt that secretly installed malware. With the target's computer compromised, the hackers stole cryptocurrency and hijacked communication accounts and contact lists to target the victim's contacts. The scheme has stolen more than $400 million in the last 18 months and has increasingly targeted open-source software developers and maintainers in an apparent bid to enable supply-chain attacks. Under a federal warrant, the FBI seized over 900 webcam videos of FaceStealer victims and published a report and resource page on the scheme.
Principal Deputy Assistant Attorney General for National Security M. Scott Proctor said North Korea bankrolls its regime and illicit weapons program through cryptocurrency theft, and that the United States will use every tool to seize and return those ill-gotten gains. Assistant Attorney General A. Tysen Duva of the Criminal Division said the division quickly froze about half of the stolen digital assets in the historic breach. FBI Cyber Branch Operations Director Brett Leatherman said North Korean actors have used FaceStealer to aggressively target the cryptocurrency and Web3 sectors, stealing more than $400 million in the last 18 months. (Source: U.S. Department of Justice)
来源:美国司法部
发布:GSM·美国(发布链接)
图片来源:图:位于华盛顿特区的联邦调查局 FBI 总部大楼(联邦固定图库)。 / Photo: FBI headquarters building in Washington, D.C. (federal asset library).
GSM Global · 本篇英文版 English edition of this story
- 2026-10-29 22:1263亿美元被盗:币安遭遇史上最大加密货币盗窃,约30亿已被冻结,公司称全额赔付
- 2026-10-30 06:58跟进:63亿美元币安被盗案:FBI与美国特勤局介入调查,签名系统被攻破、约24亿美元资产恐难追回
- 2026-10-30 22:08跟进:币安63亿美元被盗案:CFTC主席称愿给交易所一条联邦注册选项
- 2026-10-31 15:29FBI正式认定:60多亿美元币安被盗案系朝鲜所为
- 2026-10-31 22:55币安被盗63亿美元,马斯克在X上连发笑脸:赵长鹏喊停并亮出10亿美元SpaceX股份
- 2026-11-01 00:15币安恢复比特币提现:63亿美元被盗款已补回95%
- 2026-11-03 00:50朝鲜:朝中社引金与正谈话否认涉币安盗窃案 称美方说法是荒谬政治挑衅
- 2026-11-07 21:45跟进:马斯克辟谣X疯传假帖 从未要币安用户撤资 赵长鹏先发声打假
- 2026-11-08 07:39跟进:币安首席财务官离职创业:Kaiser Ng交棒Justin Yek,赵长鹏发帖送别
- 2026-11-12 14:03跟进:司法部打击朝鲜加密盗窃,冻结逾27亿美元币安被盗资产,另破深度伪造视频会议骗局本篇

